build: dual OTA partition layout + sdkconfig credential cleanup

Switch from single factory partition to dual OTA layout (ota_0/ota_1).
Add partitions_noota.csv as fallback for development builds.
Remove sdkconfig.defaults from tracking (generated by deploy.py).
Add sdkconfig.defaults.example with placeholder values.

espilon_bot/partitions.csv

@@ -1,6 +1,8 @@
-# Epsilon Bot - Custom Partition Table
+# Epsilon Bot - Custom Partition Table (OTA dual-app, 4MB flash)
 # Name,     Type, SubType, Offset,   Size,     Flags
-nvs,        data, nvs,     0x9000,   0x6000,
+nvs,        data, nvs,     0x9000,   0x4000,
+otadata,    data, ota,     0xd000,   0x2000,
 phy_init,   data, phy,     0xf000,   0x1000,
 fctry,      data, nvs,     0x10000,  0x6000,
-factory,    app,  factory, 0x20000,  0x1E0000,
+ota_0,      app,  ota_0,   0x20000,  0x1E0000,
+ota_1,      app,  ota_1,   0x200000, 0x1E0000,

espilon_bot/partitions_noota.csv

@@ -0,0 +1,6 @@
+# Epsilon Bot - Partition Table (Single app, no OTA, 4MB flash)
+# Name,     Type, SubType, Offset,   Size,     Flags
+nvs,        data, nvs,     0x9000,   0x6000,
+phy_init,   data, phy,     0xf000,   0x1000,
+fctry,      data, nvs,     0x10000,  0x6000,
+factory,    app,  factory, 0x20000,  0x3E0000,

espilon_bot/sdkconfig.defaults

@@ -1,27 +0,0 @@
-# Espilon Bot - sdkconfig defaults
-# Device
-CONFIG_DEVICE_ID="espilon-demo"
-
-# Network
-CONFIG_WIFI_SSID="mywifi"
-CONFIG_WIFI_PASS=""
-CONFIG_SERVER_IP="192.168.1.100"
-CONFIG_SERVER_PORT=2626
-
-# Crypto (factory NVS)
-CONFIG_CRYPTO_FCTRY_NS="crypto"
-CONFIG_CRYPTO_FCTRY_KEY="master_key"
-
-# mbedTLS - ChaCha20-Poly1305 + HKDF
-CONFIG_MBEDTLS_CHACHA20_C=y
-CONFIG_MBEDTLS_POLY1305_C=y
-CONFIG_MBEDTLS_CHACHAPOLY_C=y
-CONFIG_MBEDTLS_HKDF_C=y
-
-# Partition table
-CONFIG_PARTITION_TABLE_CUSTOM=y
-CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
-
-# Logging
-CONFIG_ESPILON_LOG_LEVEL_INFO=y
-CONFIG_ESPILON_LOG_BOOT_SUMMARY=y

espilon_bot/sdkconfig.defaults.example

@@ -0,0 +1,53 @@
+# Generated by epsilon deploy -- do not edit manually
+
+# Device
+CONFIG_DEVICE_ID="YOUR_DEVICE_ID"
+
+# Network
+CONFIG_NETWORK_WIFI=y
+CONFIG_WIFI_SSID="YOUR_SSID"
+CONFIG_WIFI_PASS="YOUR_PASSWORD"
+
+# C2 Server
+CONFIG_SERVER_IP="YOUR_SERVER_IP"
+CONFIG_SERVER_PORT=2626
+
+# Crypto -- ChaCha20-Poly1305 + HKDF (mbedtls, ESP-IDF v5.3)
+CONFIG_CRYPTO_FCTRY_NS="crypto"
+CONFIG_CRYPTO_FCTRY_KEY="master_key"
+CONFIG_MBEDTLS_CHACHA20_C=y
+CONFIG_MBEDTLS_POLY1305_C=y
+CONFIG_MBEDTLS_CHACHAPOLY_C=y
+CONFIG_MBEDTLS_HKDF_C=y
+
+# Flash & Partitions
+CONFIG_ESPTOOLPY_FLASHSIZE_4MB=y
+CONFIG_PARTITION_TABLE_CUSTOM=y
+CONFIG_PARTITION_TABLE_CUSTOM_FILENAME="partitions.csv"
+
+# LWIP
+CONFIG_LWIP_IPV4_NAPT=y
+CONFIG_LWIP_IPV4_NAPT_PORTMAP=y
+CONFIG_LWIP_IP_FORWARD=y
+
+# Modules
+CONFIG_MODULE_NETWORK=y
+CONFIG_MODULE_RECON=n
+CONFIG_MODULE_FAKEAP=n
+CONFIG_MODULE_HONEYPOT=n
+CONFIG_MODULE_CANBUS=n
+CONFIG_MODULE_FALLBACK=y
+CONFIG_MODULE_REDTEAM=y
+CONFIG_MODULE_TUNNEL=y
+CONFIG_TUNNEL_MAX_CHANNELS=8
+CONFIG_TUNNEL_FRAME_MAX=4096
+CONFIG_TUNNEL_TASK_STACK=6144
+
+# OTA
+CONFIG_ESPILON_OTA_ENABLED=y
+CONFIG_ESPILON_OTA_ALLOW_HTTP=y
+CONFIG_ESP_HTTPS_OTA_ALLOW_HTTP=y
+
+# Logging
+CONFIG_ESPILON_LOG_LEVEL_INFO=y
+CONFIG_ESPILON_LOG_BOOT_SUMMARY=y